System Assistant: what it is and how to remove it
System Assistant is a legitimate, though highly questionable, PC optimization utility by SoftCity and Smart PC Solutions, Inc. Cybersecurity experts have recently included it in the category of the potentially unwanted programs (PUP) since it started exhibiting suspicious activities on a host computer.
Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
If SANotifications.exe returns after removal, a full scan can find the entry that brings it back.
Do it yourself · free Remove System Assistant yourself 4 steps, about 12 minutes, no software needed.
Start the steps
System Assistant: summary
| Distribution | It has the official website and can be downloaded directly. However, it is also distributed via software bundles and the vast majority of downloads are indirect. The program is installed by default after leaving it as a pre-checked component of a freeware[2]. |
|---|---|
| NAME | System Assistant |
| Developers | SoftCity and Smart PC Solutions, Inc. |
| Classification | Potentially unwanted program (PUP), rogue system tools |
| Symptoms | The tool stars launching its fake scanners once inside the system. The tool displays exaggerated scan results, which may include both system errors and malicious entries. The installed free version cannot fix the alleged issues, therefore, the user is continuously urged to pay for the license. |
| AV detection | RiskWare:Win32/SafeCleaner.158c515a, Hoax.Win32.SafeCleaner.ax, Microsoft: PUA:Win32/SpeedingUpMyPC, PUP.Optional.Avanquest, PUA.Avanquest!8.1070F (CLOUD) |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 9 more facts
| Removal options | Reputable AV engines recognize System Assistant as a PUP or virus and can successfully eliminate it alongside its bundle. The misleading optimizer can also be removed manually from the Applications folder. |
|---|---|
| Damage | Not recorded in the old report |
| Name | System Assistant |
| Type | System optimizer |
| Files and processes | SANotifications.exe and C:\Program |
| Evidence | 4 write-ups by security sites; no sample analysed yet |
| First seen | 20 April 2020 |
| Microsoft Defender name | PUA:Win32/SpeedingUpMyPC |
| Facts checked | 7 October 2026 |
Is System Assistant safe? Why it is flagged
From our report of Apr 2020 · not reviewed since
System Assistant is a rogue system optimizer that displays pre-determined search results to make people purchase its license
System Assistant is a legitimate, though highly questionable, PC optimization utility by SoftCity and Smart PC Solutions, Inc.
Cybersecurity experts have recently included it in the category of the potentially unwanted programs (PUP) since it started exhibiting suspicious activities on a host computer.
Close analysis of the program revealed that this so-called system optimizer displays false positive scan results to scare people into thinking that their machines are heavily polluted by viruses like Trojans, spyware, and keyloggers. However, this optimizer itself is related to heuristic detection names like Riskware/SafeCleaner, PUP.Optional.Avanquest, and PUA: Win32/SpeedingUpMy PC.
This potentially unwanted program can be considered a System Assistant virus because it infiltrates PCs via software bundlers like download managers, free games or software updates. It spreads as a pre-checked component, which can only be opted-out by selecting Advanced or Custom installation options.
The installer itself adds an icon in the taskbar, start menu, and desktop. The main installer ends up in the C:\Program Files (x86)\System Assistant. Upon successful infiltration, the System Assistant virus creates a Scheduled Task C:\Program Files (x86)\System Assitant\SANotifications.exe, which launches the scanner on a regular basis.
Despite being misleading, System Assistant malware may attract people's attention due to a vividly described features. On the official website, it is represented as a remover of potential privacy risks and PC cleaner capable of regaining hard disk space, as well as eliminating PC's activity logs, unusual files, settings, and chat histories.
However, the application can hardly be considered powerful since. It seems to be shareware that has a predefined virus database and a very limited "knowledge" of the Windows system. Therefore, its scanner can actually do nothing except to slow down PC's performance and regularly remind you that you have to pay for a license key.
System Assistant is actively promoted via freeware and shareware with an intention to spread free trial versions of the utility as widely as possible. Once the free version reaches a host machine, it creates a scheduled task and keeps scanning the system with an alleged intent - to boost its performance.
Even though it may load a scanner and imitate research, the scanner does an ostensible procedure during which the system is neither checked for malware, not the system's nonconformities. The scan typically ends up with a full list of possible improvements and contains a list of PUPs and malware.
Despite the fact of how bad the System Assistant virus scan results may be, the program will fix the situation as long as the full version won't be installed. A free trial, as notified on the official website of the tool, is only as powerful as nothing, as it supposed to "Clean up disk space|" and "Remove potential privacy risks."
All the other packages of features, including system maintenance, boosting startup speed, removal of duplicate files, shred, and similar has to be purchased. One month subscription costs 9.99 Eur, while 1 month costs 36 Eur. It's up to you whether its expensive or not, but we do not recommend paying the money for a tool that promises much and does very little.
Aside from misleading features and unfulfilled promises, the System Assistant virus may be involved in privacy-related issues. The application seems to be filled with tracking cookies used to collect non-personal information like IP address, approximate geo-location, web browsing history, search queries, and similar. If you are currently using this program, open Task Manager and check if the CookieExclusions.exe is on the list.
This executable may be responsible for continuous registration of web browsing-related activities and regular transmission of collected information to remote servers. Although it can hardly reach credit card details or other personal information, however some details that you probably don't want to disclose to the third party may be leaked. As stated in the System Assistant Privacy Policy:
If you have started noticing ongoing system scans, System Assistant removal is the only way to stop them. As pointed out before, this optimization tool can hardly improve your PC's performance as its sole intention is to infiltrate PCs unnoticed and then insist on buying its paid version.
Luckily, it's not difficult to remove System Assistant virus from the system. Its main installer can be eliminated like any other application. A bigger problem is the changes that it may initiate on the system.
This rogue optimizer may corrupt some registry entries, delete some of the core system's files, compromise startup programs, and similar. Therefore, upon System Assistant removal you should use a powerful repair utility to fix the damage.
From our report of Apr 2020 · not reviewed since
More from our earlier report on System Assistant
- System Assistant removal does not ensure a full system's repair.
- Fake optimization tools like this can have a huge impact on Windows registries, startup programs, Windows startup, files, and others.
- is a tool that can help you to fix any damage left after a malware infection.
- "Personal Information" which means information that normally identifies you as a natural person, or that may be used, either alone or in combination with other information, to personally identify you as an individual.
- Such information may include a first and last name, an email address, phone number, a home or other physical address, and other contact information.
- In addition, in some jurisdictions (like the EU for example) and given the specific use we make with the information, IP address that your Internet service provider allocates for your device, may also be considered as Personal Information.
- "Non-Personal Information" which means information that cannot personally identify or lead to identifying a natural person.
- For example, statistics or aggregated information.
How System Assistant got installed
From our report of Apr 2020 · not reviewed since
Potentially unwanted programs (PUPs), including adware, browser hijacker, and rogue system optimizers, often have their official websites and can be installed intentionally by clicking on a direct download link.
However, practice shows that these websites are seldom visited and downloads are initiated even less frequently.
Consequently, developers tend to misuse software bundlers, which are also known as freeware and shareware. The owners of freeware download websites make an agreement with PUP developers to spread unwanted programs alongside well-requested applications in exchange for commission fees. Consequently, a free application, such as a download manager, a popular game, video streaming software or any other program may disguise more than one PUP under Quick or Basic installation.
Since people tend to install programs in a hurry, they often forget the risk of bundles and opt for Quick installation, which does not disclose PUPs. Quick/Basic installation is an implicit user's consent to install the bundle.
To prevent that, it's a must to opt for Advanced installation, which discloses more installation setup windows and enabled users to remove checkmarks saying that he or she agrees with the installation of additional installers.
Check your PC and browser
System Assistant detection names
If Windows Security shows PUA:Win32/SpeedingUpMyPC, it has found System Assistant or a file that belongs to it.
Write the name down before you click Remove: it is the most useful search term later, and you will need it if you report the incident.
A family name in the label is more informative than a heuristic one. Our page on why one threat has many antivirus names lists the common formats and what each part means.
- Path:
C:\Program - File:
SANotifications.exe
How to uninstall System Assistant
How to remove System Assistant
Uninstall it, then remove what keeps it starting with Windows.
Nothing it flagged needs fixing.
Step 1: Uninstall programs you did not mean to install
Open Settings > Apps > Installed apps in Windows 11, or Settings > Apps > Apps & features in Windows 10, and sort the list by install date. Look at what appeared around the day the problem started and uninstall every program you do not recognise or did not choose.
Free converters, PDF and video tools, "system optimizers" and unknown browsers are the usual carriers of System Assistant. If a name is unclear, search for it before you remove it, so you do not uninstall a driver or a Windows component.
Full procedure with screenshots: Uninstall a program or app in Windows On uGetFix
Step 2: Remove it from startup
Whatever System Assistant installed usually starts with Windows. Open Task Manager with Ctrl + Shift + Esc, go to Startup apps in Windows 11 or the Startup tab in Windows 10, and disable what you do not know, starting with entries that have an empty Publisher column.
Open file location on the right-click menu shows the file, which helps you decide and tells you what to delete later. Disabling is safe: if something you need stops working, switch it back on.
Full procedure with screenshots: Stop apps from opening at startup On uGetFix
Step 3: Delete the folders left behind
What the uninstaller leaves behind is usually in the user folders. Open File Explorer, switch on View > Show > Hidden items (in Windows 10 View > Hidden items), and go through
%LocalAppData%,%AppData%, %ProgramData% and the two Program Files folders.Sort by Date modified and delete folders that appeared together with the problem and belong to no program you use. Folders with random names that hold
.exe,.dll, .js or .ps1 files are the strongest sign.Full procedure with screenshots: Remove what malware leaves behind in Windows
Step 4: Scan the PC, then run the offline scan
Open Windows Security > Virus & threat protection > Scan options, run a Full scan and remove everything it finds. Then select Microsoft Defender Antivirus (offline scan) and click Scan now: the PC restarts and scans before Windows loads, which finds files that hide while Windows runs.
Save your work first, because the offline scan takes about 15 minutes. Both scans are built into Windows 11 and Windows 10, and a second scanner from another vendor is a useful extra opinion.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
System Assistant is compatible with Windows. It has the main installer and a bunch of additional files that can be eliminated in this way:
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.
Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.
Remove from Google Chrome
If you started seeing fake System Assistant scanners and found Google Chrome's settings compromised at the same time, you must have installed a freeware bundle with a rogue optimizer and browser hijacker appended. To eliminate a hijacker from Chrome, follow this guide:
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.
Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Remove from Microsoft Edge
In case you ran into this rogue optimizer after installing a freeware bundle, we strongly recommend you to initiate a thorough web browser's restore.
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.
Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.
Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).
Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.
- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.
Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.
Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.
Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.
Choose a proper web browser and improve your safety with a VPN tool
Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online.
One of the basic means to add a layer of security - choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features.
However, if you want true anonymity, we suggest you employ a powerful VPN - it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.
Lost your files? Use data recovery software
While some files located on any computer are replaceable or useless, others can be extremely valuable.
Family photos, work documents, school projects - these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur:
- power cuts
- Blue Screen of Death errors
- hardware failures
- crypto-malware attack
- even accidental deletion
To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, can be your only hope to retrieve your invaluable files.
From our report of Apr 2020 · not reviewed since
System Assistant removal methods
People who have been tricked to install this application will be able to easily remove the System Assistant virus from Windows.
You have to access Control Panel, locate the application under the Applications folder, click on it, and select Remove. Then follow the on-screen and finish the process.
If the program emerged on the system out of nowhere, which means that you were tricked into downloading a software bundle, you will have to take some extra steps to ensure full PUP removal. Carefully check the list of programs and eliminate each one that raises suspicions. Besides, open your web browser - the one that is set by default at the moment, and disable unfamiliar add-ons and plug-ins.
To speed up System Assistant removal you can use a professional anti-malware program. According to VirusTotal , most of the reputable AV engines are capable of detecting this malware.
Questions about System Assistant
What is SANotifications.exe and why is it running?
Every process is started by something:
- a program you installed
- a Windows service
- a scheduled task
- a startup entry
To learn why SANotifications.exe runs, find its file with Open file location in Task Manager, then look for an entry pointing to that file in Settings > Apps > Startup and in Task Scheduler.
Sort Installed apps by date to see what arrived when the process first appeared. Once you know the owner, you can decide whether to keep it, switch it off at startup or uninstall it completely.
Is PUA:Win32/SpeedingUpMyPC a false positive?
Sometimes. Names ending in !ml or describing behaviour are generated by machine learning and occasionally flag cracked tools, game mods or small unsigned utilities. A false positive is likely only when the file is a program you installed from its official developer, it is signed by that developer and other scanners do not flag it.
Files from cracks, cheats, fake updates or unknown downloads are rarely false positives, whatever the detection name. If you are sure the file is genuine, you can report it to Microsoft as a false positive; never add an exclusion for PUA:Win32/SpeedingUpMyPC just to make the alert stop.
SANotifications.exe keeps coming back. What should I do?
A process that returns after you end it has a restart mechanism, and that is a reason to treat SANotifications.exe as unwanted. Check Settings > Apps > Startup, Task Scheduler and the Services list for entries pointing to its folder, and disable them.
Look in Installed apps for anything added the same day and uninstall it. Then delete the folder and run a Microsoft Defender Offline scan, which works before Windows starts and can remove files that are locked or hidden while the system is running.
Can I ignore PUA:Win32/SpeedingUpMyPC if the PC works fine?
No. Many threats are built to leave the PC working normally while they steal passwords, use the processor or wait for instructions. A detection is Defender telling you it saw something malicious, and the absence of symptoms says nothing about its activity.
Check the action in Protection history: if it is anything other than Quarantined or Removed, remove it now. Then run a full scan. If the detection was a single file caught on download and does not return, you can move on; if PUA:Win32/SpeedingUpMyPC reappears, follow the removal steps in this guide.
Will Windows Security detect System Assistant?
Yes, current Microsoft Defender definitions name it PUA:Win32/SpeedingUpMyPC. Make sure the definitions are up to date first: open Windows Security > Virus & threat protection > Protection updates and click Check for updates. Then run a full scan and the Microsoft Defender offline scan.
If the detection comes back after you remove it, look for the program, task or extension that brings it back, using the plan above. Detection removes files and startup entries, but it does not reverse changes System Assistant already made, so follow the other steps in this guide as well.
Can System Assistant see my passwords?
There is no report of that. Unwanted programs make money from ads, offers, data about your browsing or the use of your connection, not from stealing passwords, and the sign reported here is an unfamiliar process called SANotifications.exe in Task Manager.
That said, a bundle can contain more than one program, and you cannot be sure what else ran on the day it arrived. After removing System Assistant, run a full scan in Windows Security.
If it finds a password stealer or a trojan, change your passwords from another device. If the scan is clean and you see no unknown sign-ins, there is no need to change them.
Why can't I uninstall System Assistant?
Usually because it is still running or because a helper reinstalls it. Close it from the notification area first, then end its process in Task Manager and try Settings > Apps > Installed apps again. If there is no uninstall entry, look for a folder under Program Files or AppData with the same name and an uninstaller inside.
If the program comes back after removal, the cause of an unfamiliar process called SANotifications.exe in Task Manager is a scheduled task, a startup entry or the program it was bundled with. Remove those, restart and check again. Starting Windows in Safe Mode stops most helpers and makes stubborn programs easier to remove.
Could System Assistant be a legitimate program?
Possibly. Some programs that cause an unfamiliar process called SANotifications.exe in Task Manager are real products from real companies that simply use aggressive distribution. Check the publisher in Installed apps and the digital signature in the file's Properties.
A known publisher and a program you actually use mean you can keep it and only adjust its settings. An unknown publisher, a program you never opened and no clear purpose mean it should go.
If it came bundled with something else, the decision is easy: you did not choose it, so remove it and keep the program you actually wanted.
Will removing System Assistant speed up Windows?
It often helps a little and sometimes a lot, depending on how many programs came in the same bundle. Every unwanted program that starts with Windows adds to boot time and uses memory. The one behind an unfamiliar process called SANotifications.exe in Task Manager is no exception.
Remove it, check the Startup list for others, restart and compare. If the PC is still slow, look at disk space, Windows updates and the processes at the top of Task Manager. A clean PC should sit almost idle when no programs are open.
Will Fortect remove System Assistant?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For System Assistant, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Threat Vector: What Constitutes a False Positive? (read October 7, 2026)
- ZDnet: Google: Unwanted bundled software is way more aggressive than malware (read October 7, 2026)
- VirusTotal: VirusTotal (read October 7, 2026)
- FTC: How to recognize, remove and avoid malware (read October 7, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 7, 2026)